Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Flyspray 跨站脚本漏洞
Vulnerability Description
Flyspray是一个基于web的bug追踪系统软件。 Flyspray 1.0-rc6之前的版本中存在跨站脚本漏洞。远程攻击者可通过向themes/CleanFS/templates/common.editallusers.tpl发送real_name或email_address字段利用该漏洞注入JavaScript代码，获取管理员权限。
CVSS Information
N/A
Vulnerability Type
N/A